Research · Nov 18, 2025
Critical OS Command Injection Vulnerability in Fortinet FortiWeb
Fortinet has identified a severe OS command injection vulnerability in its FortiWeb product, affecting multiple versions and potentially allowing unauthorized code execution.
What changed
Fortinet has disclosed a significant vulnerability in its FortiWeb product line, specifically related to OS command injection. This flaw allows authenticated attackers to execute unauthorized commands on the system, posing a serious risk to the integrity and security of affected installations.
- Vulnerability identified as CWE-78, indicating improper neutralization of special elements.
- Exploitable through crafted HTTP requests or CLI commands.
- Affects multiple versions of FortiWeb, including 8.0.0 to 8.0.1 and 7.0.0 to 7.0.11.
Who is affected
The vulnerability impacts a range of Fortinet's FortiWeb products, which are widely used in enterprise environments for web application security. Organizations utilizing these versions are at risk of unauthorized access and potential system compromise.
- FortiWeb 8.0.0 through 8.0.1.
- FortiWeb 7.6.0 through 7.6.5.
- FortiWeb 7.4.0 through 7.4.10.
- FortiWeb 7.2.0 through 7.2.11.
What to do
Organizations using the affected versions of FortiWeb should take immediate action to mitigate the risk posed by this vulnerability. It is crucial to apply any available patches and review security configurations to safeguard against potential exploitation.
- Update FortiWeb to the latest version as soon as patches are available.
- Review and enhance security protocols for web applications.
- Monitor system logs for any unusual activity that may indicate an attempted exploitation.